diff --git a/job-ack.yaml b/job-ack.yaml index 08e0914584b8e353e6daf4017bde4fdaaddd743d..ecc18199cb766b262ff92fa1ffc6243c7194c0e6 100644 --- a/job-ack.yaml +++ b/job-ack.yaml @@ -10,7 +10,7 @@ spec: containers: - name: kube-bench image: aquasec/kube-bench:latest - command: ["kube-bench", "--benchmark", "ack-1.0", "run", "--targets", "node,policies,managedservices"] + command: ["kube-bench", "run", "--targets", "node,policies,managedservices", "--benchmark", "ack-1.0"] volumeMounts: - name: var-lib-kubelet mountPath: /var/lib/kubelet diff --git a/job-aks.yaml b/job-aks.yaml index 766ae55a622463b4b07a91f8dd955babb274dbd5..329c86b2cee7e8e235dcf1c4b0b672850fb90f94 100644 --- a/job-aks.yaml +++ b/job-aks.yaml @@ -10,7 +10,7 @@ spec: containers: - name: kube-bench image: aquasec/kube-bench:latest - command: ["kube-bench", "node", "--benchmark", "aks-1.0"] + command: ["kube-bench", "run", "--targets", "node", "--benchmark", "aks-1.0"] volumeMounts: - name: var-lib-kubelet mountPath: /var/lib/kubelet diff --git a/job-eks-asff.yaml b/job-eks-asff.yaml index 741e282cd8a85bb4d5f26521a70dd10d9e0fa7d4..ecde08da00af2bc1d088862f27e15fe93207f396 100644 --- a/job-eks-asff.yaml +++ b/job-eks-asff.yaml @@ -31,8 +31,9 @@ spec: containers: - name: kube-bench # Push the image to your ECR and then refer to it here - image: <ID.dkr.ecr.region.amazonaws.com/aquasec/kube-bench:ref> - command: ["kube-bench", "node", "--benchmark", "eks-1.0", "--asff"] + # image: <ID.dkr.ecr.region.amazonaws.com/aquasec/kube-bench:ref> + image: aquasec/kube-bench:latest + command: ["kube-bench", "run", "--targets", "node", "--benchmark", "eks-1.0", "--asff"] volumeMounts: - name: var-lib-kubelet mountPath: /var/lib/kubelet diff --git a/job-eks.yaml b/job-eks.yaml index 720c428eb4d704b5074e36737d3037b29ef709e0..cbad7f2d0a6a2e961dbc53285fffc5732a0b236f 100644 --- a/job-eks.yaml +++ b/job-eks.yaml @@ -13,7 +13,7 @@ spec: # image: <ID.dkr.ecr.region.amazonaws.com/aquasec/kube-bench:ref> image: aquasec/kube-bench:latest # To send findings to AWS Security Hub, refer to `job-eks-asff.yaml` instead - command: ["kube-bench", "node", "--benchmark", "eks-1.0"] + command: ["kube-bench", "run", "--targets", "node", "--benchmark", "eks-1.0"] volumeMounts: - name: var-lib-kubelet mountPath: /var/lib/kubelet diff --git a/job-gke.yaml b/job-gke.yaml index 7a92c7ef6fcfd70a442b20b417fe418799948f36..3c387220d8e9e41c1c9f34e27b126f1eda7c9687 100644 --- a/job-gke.yaml +++ b/job-gke.yaml @@ -10,7 +10,7 @@ spec: containers: - name: kube-bench image: aquasec/kube-bench:latest - command: ["kube-bench", "--benchmark", "gke-1.0", "run", "--targets", "node,policies,managedservices"] + command: ["kube-bench", "run", "--targets", "node,policies,managedservices", "--benchmark", "gke-1.0"] volumeMounts: - name: var-lib-kubelet mountPath: /var/lib/kubelet diff --git a/job-iks.yaml b/job-iks.yaml index 3d3d07229302347630cf73d5008ac68bf62c664b..a67ad407f825b9407394ee7593d435fb0d8b7e3f 100644 --- a/job-iks.yaml +++ b/job-iks.yaml @@ -10,7 +10,7 @@ spec: containers: - name: kube-bench image: aquasec/kube-bench:latest - command: ["kube-bench", "--version", "1.13", "node"] + command: ["kube-bench", "run", "--targets", "node", "--version", "1.20"] volumeMounts: - name: var-lib-kubelet mountPath: /var/lib/kubelet diff --git a/job-master.yaml b/job-master.yaml index 55ab698a9e482a2847398101de57612d8795904b..e3be12b580d8ad08ba215319183278216a548e2b 100644 --- a/job-master.yaml +++ b/job-master.yaml @@ -16,7 +16,7 @@ spec: containers: - name: kube-bench image: aquasec/kube-bench:latest - command: ["kube-bench", "run", "--targets=master"] + command: ["kube-bench", "run", "--targets", "master"] volumeMounts: - name: var-lib-etcd mountPath: /var/lib/etcd diff --git a/job-node.yaml b/job-node.yaml index a9307482e91db0bb5bf84ad898394e5516239d66..b4523177587860d5b8c566a88a4de152eea58f7d 100644 --- a/job-node.yaml +++ b/job-node.yaml @@ -10,7 +10,7 @@ spec: containers: - name: kube-bench image: aquasec/kube-bench:latest - command: ["kube-bench", "run", "--targets=node"] + command: ["kube-bench", "run", "--targets", "node"] volumeMounts: - name: var-lib-etcd mountPath: /var/lib/etcd